Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12,177

Export CSV
CVE-2014-7934

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-7925

chromium-browser: use-after-free in WebAudio

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-7924

chromium-browser: use-after-free in IndexedDB

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-7907

chromium-browser: Use-after-free in blink

Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger improper handling of a detached frame, related to the (1) lock and (2) unlock methods.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-0996

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 7.1% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2016-0973

flash-plugin: multiple code execution issues fixed in APSB16-04

Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CVSS 3.1 · 8.8 High EPSS 5.5% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more
CVE-2014-1563

Mozilla: Use-after-free during DOM interactions with SVG (MFSA 2014-68)

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Mozilla Opensuse Oracle
Products
Firefox Thunderbird Evergreen and 2 more
CVE-2016-0975

flash-plugin: multiple code execution issues fixed in APSB16-04

Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CVSS 3.1 · 8.8 High EPSS 5.5% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more
CVE-2016-0983

flash-plugin: multiple code execution issues fixed in APSB16-04

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.

CVSS 3.1 · 8.8 High EPSS 5.9% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more
CVE-2016-0987

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 6.4% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2014-1550

Mozilla: Use-after-free in Web Audio due to incorrect control message ordering (MFSA 2014-58)

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.

CVSS 2.0 · 10.0 Critical EPSS 4.9% KEV · Not listed
Vendors
Mozilla
Products
Firefox Thunderbird
CVE-2016-0988

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2016-0990

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 7.2% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2016-0991

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2016-0998

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0999, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 28.3% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2016-0999

flash-plugin: multiple code execution issues fixed in APSB16-08

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-1000.

CVSS 3.1 · 8.8 High EPSS 28.6% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2014-9906

perl-DBD-MySQL: Use after free in mysql_dr_error

Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.

CVSS 3.0 · 9.8 Critical EPSS 6.1% KEV · Not listed
Vendors
Dbd-mysql Project Debian
Products
Dbd-mysql Debian Linux
CVE-2016-0974

flash-plugin: multiple code execution issues fixed in APSB16-04

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CVSS 3.1 · 8.8 High EPSS 30.8% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more
CVE-2014-7906

chromium-browser: Use-after-free in pepper plugins

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-6422

wireshark: RTP dissector crash (wnpa-sec-2014-12)

The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark